fix: serve acme-dns nameserver address

nix/modules/acme-dns.nix

@@ -14,20 +14,23 @@ let
     nsadmin = "hostmaster.commoninternet.net"
     records = [
       "acme.commoninternet.net. NS ns-acme.commoninternet.net.",
+      "ns-acme.commoninternet.net. A 91.98.47.73",
     ]
     debug = false
 
     [database]
-    engine = "sqlite3"
+    # acme-dns 2.x registers the embedded driver under `sqlite` (not the
+    # legacy `sqlite3` identifier).
+    engine = "sqlite"
     connection = "/var/lib/acme-dns/acme-dns.db"
 
     [api]
     ip = "127.0.0.1"
     port = "8080"
     tls = "none"
-    # Bootstrap registration is deliberately temporary. Once the single Lego
-    # account exists, change this to true in a follow-up reviewed deployment.
-    disable_registration = false
+    # The one Lego account was bootstrapped before this configuration was
+    # hardened. Updates authenticated by that account remain available.
+    disable_registration = true
     corsorigins = []
 
     [logconfig]